
$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json)
Hash identifier: XnBEGU4wDNlkx36ZMoeZHaz8/3vNf99EYQq82YIyUGA=
Subject key identifier: 8F:CE:35:3D:17:60:75:FB:93:46:5F:93:00:C5:A8:73:F4:72:14:6B
Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Certificate serial: 01C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
Manifest number: 01BD
Signing time: Mon 27 Jul 2026 05:39:01 +0000
Manifest this update: Mon 27 Jul 2026 05:39:01 +0000
Manifest next update: Mon 03 Aug 2026 05:39:01 +0000
Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: xVhvC46yd6v0gV3YvPJossEh8aeQIbYu6xufESyn0tI=)
2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: ggAQnyXdNs7ZbN7s75DCVXJXQOiPT7nZ4fbBC6nuxr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Validity
Not Before: Jul 27 05:39:01 2026 GMT
Not After : Aug 3 05:39:01 2026 GMT
Subject: CN=6a66eef5-c598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:79:19:af:2c:0d:1d:89:e4:97:96:2f:ab:aa:
0b:82:a3:cd:3b:3a:c9:66:e5:c5:a9:6f:ef:15:5d:
10:0c:eb:c6:84:21:1b:7c:f7:8a:19:c6:89:d3:73:
53:35:e1:57:0a:d3:17:ca:5a:08:f8:4c:3f:c6:fd:
9b:95:74:4b:40:58:ab:22:8d:48:35:12:d0:58:39:
c8:d5:08:da:2a:5f:26:8e:04:cf:bb:66:9e:a7:eb:
81:81:bd:54:fb:70:52:49:2f:76:58:89:7c:af:06:
ef:ef:c6:ae:85:55:be:3d:29:33:d3:f7:eb:d9:e7:
6f:cd:5f:5f:12:4b:2f:ee:61:40:10:9a:83:19:f6:
2d:20:b7:3d:fd:ce:7f:fb:95:0a:17:a7:80:9b:d2:
29:b8:36:e3:7b:2a:03:76:da:39:3a:58:38:ff:1b:
5e:7a:55:0c:47:b8:16:06:47:6e:84:b7:7d:80:d2:
ce:2b:26:31:ad:68:7b:bd:ef:e3:bf:33:67:d4:ad:
68:aa:f8:16:57:3b:15:00:a2:8d:68:55:49:5b:c2:
2c:7f:1d:ec:72:09:e9:89:62:d5:f0:40:78:29:93:
4f:4f:2e:e7:95:bb:02:67:5c:30:0b:f9:9c:15:b6:
55:6b:b9:27:d4:95:f4:dd:07:db:69:4f:9f:b8:da:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CE:35:3D:17:60:75:FB:93:46:5F:93:00:C5:A8:73:F4:72:14:6B
X509v3 Authority Key Identifier:
keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:77:08:54:0d:02:22:0b:b5:85:c3:50:e0:97:be:97:25:e5:
34:5c:6c:57:4a:45:12:b0:8b:fe:b6:46:23:01:d1:64:5c:39:
4f:22:28:77:c9:57:02:a8:23:b0:f4:65:43:49:34:43:ac:fe:
2e:a3:5a:69:66:12:30:1c:78:7e:85:22:47:61:df:be:85:88:
87:a3:3b:4e:f1:3d:ba:e7:93:4f:35:b4:bd:a6:fc:03:68:b6:
db:93:31:fb:ee:f7:ce:07:7f:f6:09:3f:47:bd:f1:9b:c0:cf:
71:50:3e:ce:f0:a1:75:f4:3b:24:a7:cc:b3:b1:46:f5:d6:6d:
03:8d:3b:33:c6:20:8b:0f:c5:00:e3:23:41:21:27:98:37:05:
74:a4:b7:e5:6b:38:09:8a:6b:33:68:2c:7c:6c:1b:e6:6f:80:
de:76:a5:a0:32:bb:c5:7a:67:f9:53:cf:41:08:d3:7a:53:8b:
3c:aa:5a:8f:9e:ea:62:24:f6:4e:d6:31:ed:66:b5:ab:84:d7:
9f:d1:28:7e:7b:a6:a4:58:ad:37:81:49:41:14:0f:9d:35:f8:
c8:4a:e1:fd:d0:6f:ef:9d:6d:03:97:81:89:1c:40:40:c6:f6:
ae:1e:68:b0:b6:76:c5:cc:36:f3:59:57:86:ff:9e:62:61:57:
c4:08:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:31 2026 by rpki-client